این کد قسمت www.toblog.ir/Login.php
<?php
error_reporting(0);
include("_include-config2.php");
$dbres = mysql_query("SELECT `id` FROM `[users]` WHERE `activated`=1");
$leden = mysql_num_rows($dbres);
$dbres2 = mysql_query("SELECT `id` FROM `[users]` WHERE UNIX_TIMESTAMP(NOW())-UNIX_TIMESTAMP(`online`) < 300");
$online = mysql_num_rows($dbres2);
$laatstelid = mysql_query("select `login` from `[users]` order by id desc limit 0,3");
$laatste = @mysql_result($laatstelid,0,0);
$hoogsterank = mysql_query("SELECT * FROM `[users]` WHERE `activated`>=0 ORDER BY rank DESC LIMIT 0,1");
$meestepower = mysql_query("SELECT * FROM `[users]` WHERE `activated`>=0 ORDER BY attack DESC LIMIT 0,1");
$meesterespect = mysql_query("SELECT * FROM `[users]` WHERE `activated`>=0 ORDER BY respect DESC LIMIT 0,1");
if(isset($_POST['login'],$_POST['pass'])) {
$dbres = mysql_query("SELECT `login`,`activated` FROM `[users]` WHERE `login`='{$_POST['login']}' AND `pass`=MD5('{$_POST['pass']}')");
if(($data = mysql_fetch_object($dbres)) && $data->activated == 1) {
$validate = md5(rand(0,1000));
setcookie("login",$data->login,time()+60*60*24,"/","");
setcookie("validate",$validate,time()+60*60*24,"/","");
mysql_query("REPLACE INTO `[online]`(`time`,`login`,`IP`,`validate`) values(NOW(),'{$_SERVER['REMOTE_ADDR']}','{$data->login}','$validate')");
$_SESSION['login'] = $data->login;
$_SESSION['IP'] = $_SERVER['REMOTE_ADDR'];
$dbres = mysql_query("SELECT *,UNIX_TIMESTAMP(`signup`) AS `signup` FROM `[users]` WHERE `login`='{$_SESSION['login']}'");
$_SESSION['data'] = mysql_fetch_object($dbres);
}
}
?>
<script type="text/JavaScript">
<!--
function MM_swapImgRestore() { //v3.0
var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++) x.src=x.oSrc;
}
function MM_preloadImages() { //v3.0
var d=document; if(d.images){ if(!d.MM_p) d.MM_p=new Array();
var i,j=d.MM_p.length,a=MM_preloadImages.arguments; for(i=0; i<a.length; i++)
if (a[i].indexOf("#")!=0){ d.MM_p[j]=new Image; d.MM_p[j++].src=a[i];}}
}
function MM_findObj(n, d) { //v4.01
var p,i,x; if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
if(!x && d.getElementById) x=d.getElementById(n); return x;
}
function MM_swapImage() { //v3.0
var i,j=0,x,a=MM_swapImage.arguments; document.MM_sr=new Array; for(i=0;i<(a.length-2);i+=3)
if ((x=MM_findObj(a[i]))!=null){document.MM_sr[j++]=x; if(!x.oSrc) x.oSrc=x.src; x.src=a[i+2];}
}
//-->
</script>
که بعد از اون به صفحه www.toblog.ir/login.php میره که کدش اینه یعنی لاگین در اصل از این صفحه انجام می شه همون پیغام خوش آمدگویی که روی صفحه مشکی مده ... اون صفحه رو می گم
<?php
error_reporting(0);
include("_include-config2.php");
$klikmissie = $data->kliklink;
?>
<?php /* ------------------------- */
if(isset($_POST['login'],$_POST['pass'])) {
$dbres = mysql_query("SELECT `login`,`activated` FROM `[users]` WHERE `login`='{$_POST['login']}' AND `pass`=MD5('{$_POST['pass']}')");
if(($data = mysql_fetch_object($dbres)) && $data->activated == 1) {
$validate = md5(rand(0,1000));
setcookie("login",$data->login,time()+60*60*24,"/","");
setcookie("validate",$validate,time()+60*60*24,"/","");
mysql_query("REPLACE INTO `[online]`(`time`,`login`,`IP`,`validate`) values(NOW(),'{$_SERVER['REMOTE_ADDR']}','{$data->login}','$validate')");
$_SESSION['login'] = $data->login;
$_SESSION['IP'] = $_SERVER['REMOTE_ADDR'];
$dbres = mysql_query("SELECT *,UNIX_TIMESTAMP(`signup`) AS `signup` FROM `[users]` WHERE `login`='{$_SESSION['login']}'");
$_SESSION['data'] = mysql_fetch_object($dbres);
}
}
else if($_GET['x'] == "logout") {
mysql_query("DELETE FROM `[online]` WHERE `login`='{$_COOKIE['login']}' AND `validate`='{$_COOKIE['validate']}' AND `IP`='{$_SERVER['REMOTE_ADDR']}'");
setcookie("login",'',time()-24*60*60,"/","");
setcookie("validate",'',time()-24*60*60,"/","");
unset($_SESSION['login']);
unset($_SESSION['IP']);
unset($_SESSION['data']);
}
/* ------------------------- */ ?>
<html>
<head>
<title></title>
<link rel="stylesheet" type="text/css" href="<? echo $sitelink;?>/layout/layout<?php echo $page->layout; ?>/css/css.css">
<script language="javascript">
function showTxt(id) {
document.getElementById(id).style.position = "relative";
document.getElementById(id).style.visibility = "visible";
}
</script>
راستی این کد هم ته این صفحه هست ببینید ربطی داره ؟
ENDHTML;
}
else if($data) {
print " <tr><td class=\"subTitle\"><b>Login</b></td></tr>\n";
if($data->klikmissie == 1) {
print " <tr><td class=\"mainTxt\" align=\"center\">You have now logged in!. Click <a href=\"index2.php\" target=\"_parent\"><b>Here</b></a> to enter and play the game, or just to watch. <script language=\"javascript\">setTimeout('parent.window.location.href=\"index2.php\"',1200)</script></td></tr>\n";
}
else
print " <tr><td class=\"mainTxt\" align=\"center\">You have now logged in!. Click <a href=\"index2.php\" target=\"_parent\"><b>Here</b></a> to enter and play the game, or just to watch.. <script language=\"javascript\">setTimeout('parent.window.location.href=\"index2.php\"',1200)</script></td></tr>\n";
}
else {
و اینم کد ایندکسی که تو هست یعنی صفحه ای که کاربر بش هدایت شده آما لاگین نشده
<?php
include("../../_include-config.php");
#
$select = mysql_query("SELECT * FROM `instellingen`");
#
$page = mysql_fetch_object($select);
?>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=uft8">
<title>مافیای ایرانی | سرور 1 | Server 1 | Persian MaFia</title>
<meta name="generator" content="Key www.irmafia.ir">
<META HTTP-EQUIV="EXPIRES" CONTENT="Mon, 31 Dec 2010 00:00:01 PST">
<META HTTP-EQUIV="CHARSET" CONTENT="utf8">
<META HTTP-EQUIV="VW96.OBJECT TYPE" CONTENT="Homepage">
<META NAME="RATING" CONTENT="General">
<META NAME="REVISIT-AFTER" CONTENT="4 days">
<base target="mainFrame" />
<script language="javascript">
function showMenu(id) {
if(document.getElementById(id).style.visibility == "hidden") {
document.getElementById(id).style.position = "static";
document.getElementById(id).style.visibility = "visible";
}
else {
document.getElementById(id).style.visibility = "hidden";
document.getElementById(id).style.position = "absolute";
document.getElementById(id).style.left = -100;
document.getElementById(id).style.top = -100;
}
document.getElementById('mainTable').height = '100%';
}
</script>
<script type="text/javascript">
var currenttime = '<? echo date("F d, Y H:i:s"); ?>'
var serverdate=new Date(currenttime)
function padlength(what){
var output=(what.toString().length==1)? "0"+what : what
return output
}
function displaytime(){
serverdate.setSeconds(serverdate.getSeconds()+1)
var
timestring=padlength(serverdate.getHours())+":"+padlength(serverdate.getMinutes())+":"+padlength(serverdate.getSeconds())
document.getElementById("servertime").innerHTML=timestring
}
window.onload=function(){
setInterval("displaytime()", 1000)
}
</script>